12.16. The public body designated as an official source of government digital data must, before collecting, using or communicating personal information in the exercise of its function,(1) make an evaluation of the privacy factors and send the evaluation to the Commission d’accès à l’information; and
(2) establish rules for its governance in respect of personal information and send them to the Commission.
The rules must include rules applicable to the preservation and destruction of the personal information concerned, the roles and responsibilities of the public body’s personnel members with regard to such information over the course of its life cycle and a procedure for dealing with complaints regarding personal information protection.
2021, c. 222021, c. 22, s. 71; 2023, c. 282023, c. 28, s. 1011.